Relative time
A relative time value specifies a duration or time offset using a numeric value combined with a time unit qualifier. Relative times are used to define time windows, bucket sizes, or time shifts relative to a reference point such as the query start time or current timestamp.
The format consists of a number followed immediately by a time unit
abbreviation such as s (seconds), m
(minutes), h (hours), d (days),
w (weeks), or longer qualifiers like
months, quarters, or
years.
Common examples include 30m for 30 minutes,
7d for 7 days, 3quarters for three
quarters (9 months), or 1h for one hour. These values
are interpreted relative to a reference time depending on the function's
context.
For more information on relative time syntax and supported units, see Relative Time Syntax.
Minutes and Seconds30s
5m
90m2h
7d
30d1w
2weeks
3months
1quarter
1ybucket(span=1h)
bucket(span=5m)
Functions using this Type:
bucket(), correlate(), dropEvent(), eval(), fieldset(), series(), session(), slidingTimeWindow(), timeChart()